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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

LISTING OF CLAIMS: 

1. (Currently Amended) A process for pre-controlling the execution of a program 
contained in a second chip card, inserted in a terminal, in addition to a first chip card, 
containing data and connected to a telecommunication network to which the terminal is 
linked, comprising the step of authenticating one of the first and second cards by the other, 
prior to the execution of the program , by means of the following steps: 

applying an identifier of the program which is transmitted from the second card to the 
first card and a key to an algorithm, contained in the first card, to produce a result, and 

comparing the result and a certificate which is transmitted by the second card to the 
first card in order to execute the program only in case the latter two are equal . 

2. (Canceled) 

3. (Currently Amended) The process in accordance with Claim 2 1, further including 
the step of selecting the key in a table of keys contained in the first card as a function of the 
program identifier. 

4. (Original) The process in accordance with Claim 1 , wherein the authentication 
involves an authentication of the second card by the first card, and comprises the following 
steps: 
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- transmitting a random number from the first card to the second card; 

- applying the transmitted random number and a key to an algorithm contained in the 
second card to produce a signature that is transmitted to the first card; 

- applying the random number and a key to an algorithm contained in the first card to 
produce a result; and 

- comparing the result to the signature transmitted to the first card so as to execute the 
program only when the two are equal. 

5. (Currently Amended) Th e proc e ss in accordanc e with Claim 4 , furth e r including th e 
step-ef A process for pre-controlling the execution of a program contained in a second chip 
card, inserted in a terminal, in addition to a first chip card, containing data and connected to a 
telecommunication network to which the terminal is linked, comprising the step of 
authenticating one of the first and second cards by the other, prior to the execution of the 
program, by means of the following steps: 

selecting the a key from a table of keys contained in the first card as a function of a 
program identifier transmitted from the second card to the first card; 

transmitting a random number from the first card to the second card; 

applying the transmitted random number and the key to an algorithm contained in the 
second card to produce a signature that is transmitted to the first card; 

applying the random number and the key to an algorithm contained in the first card to 
produce a result; and 

comparing the result to the signature transmitted to the first card so as to execute the 
program only when the two are equal. 



VA 323548.1 



Attorney's Docket No. 032326-031 
Application No. 09/586.977 
Page 4 

6. (Original) The process in accordance with Claim 1, wherein the authentication 
involves an authentication of the first card by the second card, and comprises the following 
steps: 

- transmitting a predetermined field of a number from the first card to the second card; 

and 

- comparing the predetermined field to a number in the second card so as to execute 
the program or to read its content only when the two are equal. 

7. (Original) The process in accordance with Claim 6, wherein the predetermined field 
comprises at least the call sign of the telecommunication network contained in an identity 
number of the first card. 

8. (Original) The process in accordance with Claim 1, wherein the authentication 
involves an authentication of the first card by the second card, and comprises the following 
steps: 

- reading a random number from the first card into the second card; 

- applying the random number and a key to an algorithm contained in the first card so 
as to produce a signature transmitted to the second card; 

- applying the random number and a key to an algorithm contained in the second card 
so as to produce a result; and 

- comparing the result to the signature transmitted to the second card so as to execute 
the program or read its content only when the two are equal. 
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9. (Currently Amended) Th e proc e ss in accordanc e with Claim 8, furth e r including th e 
st e p of A process for pre-controlling the execution of a program contained in a second chip 
card, inserted in a terminal in addition to a first chip card, containing data and connected to a 
telecommunication network to which the terminal is linked, comprising the step of 
authenticating one of the first and second cards by the other, prior to the execution of the 
program, by means of the following steps: 

selecting the a key in a table of keys contained in a first card as a function of a 
program identifier transmitted by the second card to the first card; 

reading a random number from the first card into the second card; 

applying the random number and the key to an algorithm contained in the first card so 
as to produce a signature transmitted to the second card: 

applying the random number and the key to an algorithm contained in the second card 
so as to produce a result; and 

comparing the result to the signature transmitted to the second card so as to execute 
the program or read its content only when the two are equal . 

10. (Original) The process in accordance with Claim 1, comprising a first authentication 
of one card by the other card and a second authentication of the other card by said one card 
which follows the first authentication when said one card is authenticated by the other card 
and which is followed by the execution of the program when the other card is authenticated 
by said one card. 
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11. (Original) The process in accordance with Claim 1, wherein at least one part of the 
authentication is executed only in response to an authentication request, transmitted from the 
second card to the first card. 

12. (Original) The process in accordance with Claim 1, wherein authentication steps are 
executed in a server of the telecommunication network in response to a request from the first 
card. 

13. (Original) The process according to Claim 1, further including the steps of reading of 
the characteristics for the execution of the program in the second card, by the first card or the 
terminal in response to an introduction of the second card in a reading means linked to the 
terminal, and analysis of the characteristics in comparison to the material and software 
capacities of the first card and/or the terminal to reject the second card when said 
characteristics are incompatible with the first card and/or the terminal. 

14. (Original) The process in accordance with Claim 1, further including the step, 
between the authentication of card and the execution of the program, of remotely loading the 
program from the second card into the first card for a program execution in the first card. 

15. (Original) The process in accordance with Claim 1, wherein the program is launched 
on command from the first card to be executed in the second card and exchanges of 
commands and responses are made between the second card and the terminal. 
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16. (Original) The process of claim 15 wherein said exchanges are made directly 
between the second card and the terminal. 

17. (Original) The process of claim 15 wherein said exchanges between the second card 
and the terminal are made through the first card. 

18. (Original) The process in accordance with Claim 1, further including the step, 
between the authentication of card and the execution of program, of remotely loading the 
program from the second card into the terminal for program execution in the terminal. 

19. (Original) The process in accordance with Claim 1, wherein the telecommunication 
network is a radio telephone network, the terminal is a mobile radio telephone terminal, and 
the first card is a subscriber identity card. 

20. (Currently Amended) A process for executing an application program in a terminal of 
a telecommunication network having a first , SIM card containing subscriber identification 
and communication information, and a second, program card containing the application 
program to be executed, comprising the following steps: 

transmitting, from said second card to said first card, information pertaining to the 
application program to be executed; 

authenticating said second card via said first card, based upon said transmitted 
information; and 

executing said program contained in the second card if the authentication is 
successful. 
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21 . (Previously Presented) The process of claim 20, wherein said authenticating step is 
performed, at least in part, by a server remote from said terminal, in response to a request 
from said first card. 

22. (Previously Presented) The process of claim 20, further including the step of 
authenticating said first card by said second card, prior to executing said program. 

23. (Previously Presented) The process of claim 20, wherein said transmitted information 
includes an identifier of the application program. 

24. (Previously Presented) The process of claim 20, wherein said transmitted information 
includes characteristics required for the execution of the application program. 

25. (Previously Presented) The process of claim 20, wherein said authenticating step 
includes the step of: 

using the information pertaining to the program to select a key; 
processing a data value in accordance with said key; and 

comparing the processed data value with a value received from said second card. 

26. (Previously Presented) The process of claim 25, wherein said data value comprises 
said information pertaining to the program. 
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27. (Previously Presented) The process of claim 25 wherein said data value comprises a 
random number, and the value received from said second card is a signature generated from 
said random number by said second card. 
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